urlquery.net
WEBSITE ANALYSIS REPORT

http://cineby.rocks

public
Report tags
Submit tags
Request review

Domain graph

Hostnames and connections captured in this scan

CallsLoads fromRedirects toEmbeds
Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds
Reset
Captured HTTP requests; click any summary row or use its hostname button to expand transaction details.
Timestamp (UTC)MethodStatusHost / pathTypeSizeDurationSignals
GET403document5.4 KB91 ms2 alerts
GET301document0 B23 ms2 alerts
GET403document5.4 KB23 ms2 alerts
GET200script247.3 KB17 ms2 alerts
GET200img15.0 KB253 ms2 alerts
GET200script84.7 KB64 ms—
POST200xhr104.8 KB39 ms2 alerts
GET200img15.0 KB37 ms2 alerts
GET200subdocument258.0 KB17 ms—
POST200xhr786.2 KB40 ms—
GET401fetch1 B6 ms—
GETNo responsefetch0 B0 ms—
GET200img395 B5 ms—
POST200xhr119.8 KB68 ms—
POST200xhr15.5 KB19 ms—
POST200xhr3.7 KB19 ms2 alerts
GET403document5.5 KB13 ms2 alerts

Transaction #34

Request / response

URL

Navigation request GET HTTPS
https://cineby.rocks/

IP / ASN

Country unknown 172.67.147.173

AS13335 · CLOUDFLARENET

Requested by
Not recorded

Detections

Detection observations attached to this HTTP transaction.
DetectionSeverityVerdict
DigiCert UltraDNS SinkholedmediumMalicious
DNS4EU SinkholedmediumMalicious

HTTP headers

Request headers

GET / HTTP/1.1
Host: cineby.rocks
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip, deflate, br, zstd
Sec-GPC: 1
Connection: keep-alive
Cookie: cf_clearance=vP8wdCSE1jNUz3nvvXvXWZrwu0lK1ZIPXH2MvkWCvek-1792619997-1.2.1.1-U5UXe3xz5_p9dBvkw5rzWJmiYswVsCJrAPb3..DgMXlX47kN1lAiA7qLbm_83kwyuwQTNa48z6r7R7aXhYY9zy3bpGE6GKxGwlWObNgC52KIbZUwcDFhnWvkpY43yCxvI5w3Ar60mNLSVa9Oh7ZLwH0ehyO6HndeD7_e_nUMvC4W30WnLPEOk0F4gdV5BH6uFxrwbwyRomoujVmlaXCO3kjmI5fVGIVpusGzvE04bdT5318lMLr4iBZ3ZkBdmZ2Em6iia4I874BxQHdiH78NK4jCIO_OA.mytHAmrRh8Yr91ZkSV_BbH0ZWopQEn3LQ7qm.otvuSRSScaxUei9g321SFlk3b_bDY_IeFyF6uDdxEWLdEzGUEOGT4dQrEEfHgrH6LkJymRvJJH1ykkhOLofY2lcjsgU9DvBLvd.fu6WDT_kTaJgWaZK8UY.4lDZjjM2vGlKVepKo72EIqfEdoij8tulWiMbnkydkwJ.xRDJYtgB3QQCvpKjLFdDuDjrAzf8Yw3vC8iYpDmyJoFtRORw; cf_chl_rc_ni=1
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
Priority: u=0, i
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/3 403 
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cf-mitigated: challenge
content-type: text/html; charset=UTF-8
content-security-policy: default-src 'none'; script-src 'nonce-MfHMisw1O0YBK42UURZgjO' 'unsafe-eval' https://challenges.cloudflare.com; script-src-attr 'none'; style-src 'unsafe-inline'; img-src 'self' https://challenges.cloudflare.com; connect-src 'self' https://challenges.cloudflare.com; frame-src 'self' https://challenges.cloudflare.com blob:; child-src 'self' https://challenges.cloudflare.com blob:; worker-src blob:; form-action http: https:; base-uri 'self'
server: cloudflare
critical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cross-origin-embedder-policy: require-corp
cross-origin-opener-policy: same-origin
cross-origin-resource-policy: same-origin
origin-agent-cluster: ?1
permissions-policy: accelerometer=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=(),xr-spatial-tracking=*
referrer-policy: same-origin
server-timing: chlray;desc="a4e38854685db28a", cfExtPri
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
speculation-rules: "/cdn-cgi/speculation"
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=la8jUlOTCSvLtg8dWFOTxlKuRGugkQiiiWj0Qmi5Ft8llImfsMVS%2FeiF8%2BuWjy%2BZXPE0cAPUqVt0ZYmcXAlN3zKbMIJD41UMWo5ARVIaUJm3iBQMIchiZDefF09gDLA%3D"}]}
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
date: Wed, 21 Oct 2026 21:59:59 GMT
priority: u=0,i
content-encoding: zstd
cf-ray: a4e38854685db28a-OSL
alt-svc: h3=":443"; ma=86400

GET200script242.4 KB24 ms2 alerts
GET200img15.0 KB71 ms2 alerts
GET200script84.7 KB12 ms—
GET200img15.0 KB7 ms2 alerts
POST200xhr104.8 KB18 ms2 alerts
GET200subdocument268.3 KB15 ms—
POST200xhr786.5 KB153 ms—
GET200img4.8 KB8 ms—
POST200xhr119.8 KB30 ms—
POST200xhr15.5 KB36 ms—
POST200xhr3.7 KB17 ms2 alerts
GET403document5.5 KB6 ms2 alerts
GET200script249.9 KB10 ms2 alerts
GET200img15.0 KB66 ms2 alerts
GET200script84.7 KB11 ms—
GET200img15.0 KB10 ms2 alerts
POST200xhr104.8 KB16 ms2 alerts
GET200subdocument262.3 KB17 ms—
POST200xhr804.9 KB145 ms—
Loading evidence…
WORKSPACE SETTINGS

Display preferences

Saved on this device.

SuccessInfoWarningDangerCriticalUnknown

Security colors remain independent of your accent.

Go to…

Recent scans ↵ Search reports /Search hosts ↵

No matching commands.

Ctrl/⌘ K Commands · Esc Close

LOCAL DEMONSTRATION

Notifications

No live event connection.

No notifications yet. Preview an event below.

Full request body

Full screenshot

Full browser screenshot